CVE-2023-2646 MEDIUM

CVE-2023-2646: TP-Link Archer C7v2 GET Request Parameter denial of service

Vendor Tp-Link
Product Archer C7v2
Weakness CWE-404
Published May 11, 2023
Last update January 24, 2025
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Request Parameter Handler. The manipulation leads to denial of service. The attack can only be done within the local network. The associated identifier of this vulnerability is VDB-228775. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

May 11, 2023 CVE published
January 24, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-1493 Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of service CVE-2023-2379 Ubiquiti EdgeRouter X Web Service denial of service CVE-2025-3730 PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service CVE-2026-10117 Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service CVE-2026-7779 Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of service